Port 4438
HoneyLabs honeypots recorded 37 probes against destination port 4438 from 8 distinct source IP addresses in the last 7 days.
First observed 2026-09-17 04:16:45, most recently 2026-09-23 10:28:26 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 94.26.83.79 | 30 | Dedik Services Limited | DE |
| 109.205.211.23 | 1 | MEVSPACE sp. z o.o. | AZ |
| 85.217.149.20 | 1 | Modat B.V. | CA |
| 85.239.151.54 | 1 | Interserver, Inc | ER |
| 147.185.133.94 | 1 | Google LLC | US |
| 147.185.133.95 | 1 | Google LLC | US |
| 147.185.133.254 | 1 | Google LLC | US |
| 85.217.149.19 | 1 | Modat B.V. | CA |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS207043 | Dedik Services Limited | 30 | 1 |
| AS396982 | Google LLC | 3 | 3 |
| AS209334 | Modat B.V. | 2 | 2 |
| AS19318 | Interserver, Inc | 1 | 1 |
| AS201814 | MEVSPACE sp. z o.o. | 1 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| Germany | 30 |
| United States | 3 |
| Canada | 2 |
| Eritrea | 1 |
| Azerbaijan | 1 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| what-vpn-go/0.1 | 14 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 | 6 |
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 3 |
| ncsrv | 2 |
| AnyConnect | 2 |
Port report
Port report
Loading live data…